News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 54 so far | 7 |
Developing
Thu 6 Jun 202464 articles
- Los Angeles Unified School District investigates data theft claims
Los Angeles Unified School District (LAUSD) officials are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers. [...]
BleepingComputer - Hackers exploit 2018 ThinkPHP flaws to install ‘Dama’ web shells
Chinese threat actors are targeting ThinkPHP applications vulnerable to CVE-2018-20062 and CVE-2019-9082 to install a persistent web shell named Dama. [...]
BleepingComputer - Ukraine says hackers abuse SyncThing data sync tool to steal data
The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed "SickSync," launched by the UAC-0020 (Vermin) hacking group in attacks on the Ukrainian defense forces. [...]
BleepingComputer - Ukraine says hackers abuse SyncThing tool to steal data
The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed "SickSync," launched by the UAC-0020 (Vermin) hacking group in attacks on the Ukrainian defense forces. [...]
BleepingComputer - Attacks Surge on Check Point's Recent VPN Zero-Day Flaw
One monitoring firm has detected exploitation attempts targeting CVE-2024-24919 from more than 780 unique IP addresses in the past week.
Dark Reading - 'Commando Cat' Digs Its Claws into Exposed Docker Containers
Attackers are taking advantage of misconfigured containers to deploy cryptocurrency mining software.
Dark Reading - Interpol, FBI Disrupt Moldova-Based Cyber Ring
Four suspects were taken into custody, accused of paying intermediaries in Moldova to inform criminals of their Red Notice status and wipe law-enforcement flags from the system.
Dark Reading - Technology, Regulations Can't Save Orgs From Deepfake Harm
Monetary losses, reputational damage, share price declines — it's hard to counter, much less try to stay ahead of, AI-based attacks.
Dark Reading - US Proposes To Boost Internet Security, Citing Chinese Carrier Action
No content available.
packetstormsecurity.com - Microsoft Shows Venerable And Vulnerable NTLM Security Protocol The Door
No content available.
packetstormsecurity.com - Google To Start Permanently Deleting Users' Location History
No content available.
packetstormsecurity.com - 7-Year-Old Oracle WebLogic Bug Under Active Exploitation
No content available.
packetstormsecurity.com - New Fog ransomware targets US education sector via breached VPNs
A new ransomware operation named 'Fog' launched in early May 2024, using compromised VPN credentials to breach the networks of educational organizations in the U.S. [...]
BleepingComputer - A new Linux version of TargetCompany ransomware targets VMware ESXi environments
A new Linux variant of the TargetCompany ransomware family targets VMware ESXi environments using a custom shell script. A new variant of the TargetCompany ransomware group uses a custom shell script as a means of payload delivery and execution, this is the…
Security Affairs - New Gitloker attacks wipe GitHub repos in extortion scheme
Attackers are targeting GitHub repositories, wiping their contents, and asking the victims to reach out on Telegram for more information. [...]
BleepingComputer - Mallox Ransomware Variant Targets Privileged VMWare ESXi Environments
Novel attack vector uses a custom shell for payload delivery and execution — and only goes after systems with administrative privileges.
Dark Reading - Chinese Hackers Exploit Old ThinkPHP Vulnerabilities in New Attacks
Akamai warns that a Chinese threat actor is exploiting years-old remote code execution vulnerabilities in ThinkPHP in new attacks.
SecurityWeek - PandaBuy pays ransom to hacker only to get extorted again
Chinese shopping platform Pandabuy told BleepingComputer it previously paid a a ransom demand to prevent stolen data from being leaked, only for the same threat actor to extort the company again this week. [...]
BleepingComputer - US Authorities Attempting to Recover $5.3 Million Stolen in BEC Scam
The US government is trying to recover more than $5.3 million stolen by cybercriminals through a BEC scheme from a workers union.
SecurityWeek - Why Hackers Love Logs
Log tampering is an almost inevitable part of a compromise. Why and how do cybercriminals target logs, and what can be done to protect them?
SecurityWeek - Understanding Security's New Blind Spot: Shadow Engineering
In the rush to digital transformation, many organizations are exposed to security risks associated with citizen developer applications without even knowing it.
Dark Reading - Inside Baseball: The Red Sox Cloud Security Game
Inside the baseball team's strategy for building next-gen security operations through zero trust and a raft of future initiatives aiming to safeguard team data, fan info, and the iconic Fenway Park — which, by the way, is now a smart stadium.
Dark Reading - Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks
The distributed denial-of-service (DDoS) botnet known as Muhstik has been observed leveraging a now-patched security flaw impacting Apache RocketMQ to co-opt susceptible servers and expand its scale. "Muhstik is a well-known threat targeting IoT devices and…
The Hacker News - AI-driven compliance: The key to cloud security
The growth of cloud computing continues unabated, but it has also created security challenges. The acceleration of cloud adoption has created greater complexity, with limited cloud technical expertise available in the market, an explosion in connected and…
securityintelligence.com - Advance Auto Parts customer data posted for sale
A cybercriminal using the handle Sp1d3r is offering to sell 3 TB of data taken from Advance Auto Parts, Inc. Advance Auto Parts is a US automotive aftermarket parts provider that serves both professional installers and do it yourself customers. Allegedly the…
Malwarebytes - Google, Microsoft: Russian Threat Actors Pose High Risk to 2024 Paris Olympics
Google and Microsoft warn of elevated risks of cyber threats facing the 2024 Paris Olympics, especially from Russian threat actors.
SecurityWeek - A Russian Cyber Gang Is Thought to Be Behind a Ransomware Attack That Hit London Hospitals
A Russian cyber gang is believed to be behind a ransomware attack that disrupted London hospitals and led to operations and appointments being canceled.
SecurityWeek - Exploitation of Recent Check Point VPN Zero-Day Soars
GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day.
SecurityWeek - Dark Web Profile: Qilin (Agenda) Ransomware
Dark Web Profile: Qilin (Agenda) Ransomware Qilin, also known as Agenda ransomware, represents a formidable threat in cybercrime. This ransomware, one of the known Ransomware-as-a-Service (RaaS) groups, is designed with adaptability in mind, allowing it to…
SOCRadar - Husband stalked ex-wife with seven AirTags, indictment says
Following their divorce, a husband carried out a campaign of stalking and abuse against his ex-wife—referred to only as “S.K.”—by allegedly hiding seven separate Apple AirTags on or near her car, according to documents filed by US prosecutors for the Eastern…
Malwarebytes - Vulnerabilities Patched in Kiuwan Code Security Products After Long Disclosure Process
It took code security firm Kiuwan nearly two years to patch several serious vulnerabilities found in its SAST products.
SecurityWeek - Microsoft Recall snapshots can be easily grabbed with TotalRecall tool
Microsoft’s Recall feature has been criticized heavily by pretty much everyone since it was announced last month. Now, researchers have demonstrated the risks by creating a tool that can find, extract, and display everything Recall has stored on a device.…
Malwarebytes - Interpol and FBI Break Up a Cyber Scheme in Moldova to Get Asylum for Wanted Criminals
A multinational operation by Interpol and the FBI cracked down on attempts in Moldova to sabotage one of the international police agency’s key tools, the Red Notice system.
SecurityWeek - Third-Party Cyber Attacks: The Threat No One Sees Coming – Here's How to Stop Them
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you…
The Hacker News - Upleveling the State of SMB Cybersecurity
Gone are the days when cyberattacks were deemed concerns solely by corporate giants.
SecurityWeek - Multiple Chinese APTs Targeted Southeast Asian Government for Two Years
Multiple Chinese state-sponsored groups have targeted a Southeast Asian government in a years-long cyberespionage campaign.
SecurityWeek - FBI obtained 7,000 LockBit decryption keys, victims should contact the feds to get support
The FBI is informing victims of LockBit ransomware it has obtained over 7,000 LockBit decryption keys that could allow some of them to decrypt their data. The FBI is inviting victims of LockBit ransomware to come forward because it has obtained over 7,000…
Security Affairs - Prevent Account Takeover with Better Password Security
Tom works for a reputable financial institution. He has a long, complex password that would be near-impossible to guess. He’s memorized it by heart, so he started using it for his social media accounts and on his personal devices too. Unbeknownst to Tom, one…
The Hacker News